This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/3WDU47d2fLscnSW7F3hgvaXG5ss.roa File: 3WDU47d2fLscnSW7F3hgvaXG5ss.roa (raw, json) Hash identifier: BfORbJGgiA+wWZ0EeMRYkEWvSYxDk7NkNvd7Q4xSZco= Subject key identifier: DD:60:D4:E3:B7:76:7C:BB:1C:9D:25:BB:17:78:60:BD:A5:C6:E6:CB Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Certificate serial: 019B7CED495715A6C2F35B019BD2CF6FF5B3 Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/3WDU47d2fLscnSW7F3hgvaXG5ss.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21346 IP address blocks: 193.19.196.0/24 maxlen: 24 193.19.197.0/24 maxlen: 24 194.125.246.0/24 maxlen: 24 194.125.247.0/24 maxlen: 24 195.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:49:57:15:a6:c2:f3:5b:01:9b:d2:cf:6f:f5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd60d4e3b7767cbb1c9d25bb177860bda5c6e6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:40:0f:03:7c:2e:c0:3d:65:08:c1:ce:b8: 69:71:38:d3:79:f4:be:bb:95:0b:f0:85:49:cb:3c: b7:a1:3e:2b:10:d6:b5:8d:a8:ed:9c:83:be:6d:5b: 5d:46:12:86:b8:34:45:9b:c7:17:80:44:22:0f:03: 76:af:d7:40:a7:6a:ef:f2:a0:7e:60:3c:24:85:22: 13:76:b0:d9:2f:43:c0:22:56:bd:e3:e9:fb:e1:45: b4:16:ed:11:eb:4a:3c:47:e3:58:b0:8c:10:5f:01: 4f:14:c8:3c:29:2d:a7:25:02:d8:42:f8:fc:fe:ba: 3b:ef:c2:6a:9a:66:3b:a2:65:18:98:29:8c:ae:74: e4:bf:c8:f8:c7:85:cf:55:6a:4c:7a:e9:ed:aa:39: 35:9c:06:f7:d5:fa:4e:ab:28:9b:fb:98:db:30:43: c8:d7:28:35:1c:53:94:d4:c7:bd:27:17:09:b8:09: 70:20:cf:46:27:9e:d6:bc:9a:79:de:de:4c:00:8d: 51:13:14:e8:4b:33:23:1b:9e:34:7e:31:d9:53:51: aa:84:b0:83:bb:73:ba:91:2e:13:e1:6a:23:d5:98: 2c:cf:53:1a:cb:f2:b1:87:82:be:f9:5d:1a:c3:a2: ff:fa:c1:7f:3a:e2:21:d5:d8:b8:e5:e1:a0:57:6e: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:D4:E3:B7:76:7C:BB:1C:9D:25:BB:17:78:60:BD:A5:C6:E6:CB X509v3 Authority Key Identifier: keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/3WDU47d2fLscnSW7F3hgvaXG5ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.196.0/23 194.125.246.0/23 195.22.158.0/24 Signature Algorithm: sha256WithRSAEncryption 45:3f:9a:86:02:8e:af:28:42:a3:65:d5:eb:e0:83:f8:00:68: cc:3a:86:5a:68:e6:b7:df:9c:7f:f2:cd:b4:ed:5c:63:d0:a0: 7a:e1:22:e6:06:8a:a2:96:ab:6f:3d:23:da:cb:11:6c:61:be: b3:3a:8f:de:5b:55:e0:38:38:61:a5:9a:d9:ab:81:15:43:b4: 64:9b:53:48:16:c7:de:6b:86:4b:eb:35:00:11:f1:3e:2c:3f: cb:9f:63:df:dd:fe:19:6a:2f:50:ff:67:44:dd:be:3a:93:cd: 7f:9c:4d:4b:9c:20:72:1b:c9:b8:b0:e8:95:2d:4c:93:fb:17: bb:eb:a1:b6:07:bc:92:60:e5:00:2c:1c:ac:78:2b:68:0d:0e: 09:9f:5e:3c:13:1f:28:0e:54:10:b0:0f:cb:57:17:74:90:c7: 58:31:7f:28:cf:d7:f7:d3:49:7a:21:36:a5:1e:fc:06:0f:9d: 38:c7:b1:ea:ad:5f:22:bf:03:19:d1:9f:a3:9b:63:bb:44:02: f5:30:48:34:c6:a7:08:58:e6:32:50:09:eb:a3:90:c7:5f:24: 35:ff:43:ef:10:7c:40:d1:88:ee:07:04:89:ed:f6:05:b1:dc: a9:2f:6a:0b:ca:19:15:35:37:bc:2b:2c:08:d5:28:77:16:24: e2:b0:91:a8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87UlXFabC81sBm9LPb/WzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzlhZmNiYTVhODc2MmZiNzlmNGU1ZTBkN2EzNWVlODRj ZDNkZjQwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDYwZDRlM2I3NzY3Y2JiMWM5ZDI1YmIxNzc4NjBiZGE1YzZlNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzNADwN8LsA9ZQjBzrhpcTjTefS+ u5UL8IVJyzy3oT4rENa1jajtnIO+bVtdRhKGuDRFm8cXgEQiDwN2r9dAp2rv8qB+ YDwkhSITdrDZL0PAIla94+n74UW0Fu0R60o8R+NYsIwQXwFPFMg8KS2nJQLYQvj8 /ro778JqmmY7omUYmCmMrnTkv8j4x4XPVWpMeuntqjk1nAb31fpOqyib+5jbMEPI 1yg1HFOU1Me9JxcJuAlwIM9GJ57WvJp53t5MAI1RExToSzMjG540fjHZU1GqhLCD u3O6kS4T4Woj1Zgsz1May/Kxh4K++V0aw6L/+sF/OuIh1di45eGgV24YewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN1g1OO3dny7HJ0luxd4YL2lxubLMB8GA1UdIwQY MBaAFIB5r8ulqHYvt59OXg16Ne6EzT30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMt ZDJlMTBjOTc2NDVmLzEvM1dEVTQ3ZDJmTHNjblNXN0YzaGd2YVhHNXNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMtZDJlMTBjOTc2NDVm LzEvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwRPEAwQB wn32AwQAwxaeMA0GCSqGSIb3DQEBCwUAA4IBAQBFP5qGAo6vKEKjZdXr4IP4AGjM OoZaaOa335x/8s207Vxj0KB64SLmBoqilqtvPSPayxFsYb6zOo/eW1XgODhhpZrZ q4EVQ7Rkm1NIFsfea4ZL6zUAEfE+LD/Ln2Pf3f4Zai9Q/2dE3b46k81/nE1LnCBy G8m4sOiVLUyT+xe766G2B7ySYOUALByseCtoDQ4Jn148Ex8oDlQQsA/LVxd0kMdY MX8oz9f300l6ITalHvwGD504x7HqrV8ivwMZ0Z+jm2O7RAL1MEg0xqcIWOYyUAnr o5DHXyQ1/0PvEHxA0YjuBwSJ7fYFsdypL2oLyhkVNTe8KywI1Sh3FiTisJGo -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:44 2026 by rpki-client